Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer
File:                     708351A7D650085780AA7D6B77F317953F16F999.cer (raw, json)
Hash identifier:          2wjFdIb7uVws2ycsV+6qwJeUdM1OSd95D7G07jTt0f8=
Subject key identifier:   70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       77099917E2902BC5D53B817ED59E886C8EB9FD74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Jan 2025 19:17:50 +0000
Certificate not after:    Mon 19 Jan 2026 19:22:50 +0000
Subordinate resources:    IP: 103.196.156.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:09:99:17:e2:90:2b:c5:d5:3b:81:7e:d5:9e:88:6c:8e:b9:fd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan 20 19:17:50 2025 GMT
            Not After : Jan 19 19:22:50 2026 GMT
        Subject: CN=708351A7D650085780AA7D6B77F317953F16F999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b9:12:8a:5b:56:c9:5a:8b:72:69:2e:89:b1:
                    84:b3:32:b3:ef:cf:9b:b2:97:73:4b:7b:cc:38:f8:
                    74:55:bc:5b:3c:53:f4:3d:e3:36:83:b9:0d:cc:72:
                    c5:db:ef:d5:72:37:1d:d3:cd:b0:ae:0c:26:96:59:
                    e8:aa:a1:23:58:af:89:1b:f8:0d:53:74:38:ae:42:
                    59:2d:cb:fc:80:e9:f9:4a:ab:ef:bd:7c:e8:47:ff:
                    9c:f8:fa:68:ca:ba:64:17:56:63:6b:53:98:00:de:
                    be:68:c5:7c:a7:6b:6c:fe:ca:58:f2:14:3e:75:a7:
                    c3:39:87:ea:0f:f9:5b:29:bd:b5:13:0d:1c:c8:bf:
                    53:be:93:52:96:94:24:ef:a6:77:c7:84:e7:2a:48:
                    19:a1:20:13:6f:16:d5:2c:c5:cd:99:0f:e4:3a:04:
                    53:bc:f1:b2:2c:1e:5a:b7:39:19:85:c4:3f:9b:3d:
                    40:bb:06:04:78:7e:8f:07:1e:a1:38:c2:8e:bd:22:
                    e1:37:ca:f3:83:ff:7d:cd:96:77:b7:3f:eb:a5:11:
                    d0:f5:be:f1:0a:a7:75:fb:6f:4f:7c:99:de:d2:a5:
                    c6:8b:cd:47:8c:60:b8:bf:85:df:1a:2b:44:55:c3:
                    bc:32:bc:75:6a:87:7d:26:63:b5:c6:07:d5:76:52:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:75:d5:9a:85:28:4e:b6:d8:a4:3c:4a:13:78:c3:7e:f9:7e:
         fa:0c:ed:21:b7:f7:46:e4:06:1e:8b:fc:52:2a:8b:a6:a6:bb:
         bb:ac:a0:0b:63:46:2c:3d:d0:76:2a:1a:e3:0e:dd:55:ee:86:
         e0:a0:d3:b0:48:12:af:05:4f:09:33:0e:cb:38:7b:e5:ee:f3:
         0d:30:d6:39:b3:fb:4a:2e:7a:36:c2:41:c5:33:ba:60:4b:c3:
         80:26:12:07:1e:78:9a:ae:94:1f:6c:56:7a:3f:84:1d:0a:42:
         c2:dd:c0:c2:17:3b:e1:fc:6c:e6:a2:e3:57:76:be:89:2e:2e:
         de:cb:87:8d:a7:4c:03:e5:bc:b6:f7:2c:79:21:52:b3:1f:94:
         f2:e8:ad:55:a2:67:73:13:15:b7:83:6c:59:cb:17:cf:16:77:
         33:c1:d1:0a:b2:60:0b:4f:6a:a9:8f:f8:76:e7:0a:fb:6d:67:
         1c:00:c7:37:d7:94:36:15:b5:d0:61:4e:3d:a0:2f:65:f9:01:
         82:9e:f0:e2:4e:fc:84:0e:4b:91:cb:0b:08:5c:e7:2a:1f:ab:
         35:69:09:dc:d7:f3:ea:fa:6b:64:bb:26:29:bd:21:d3:3c:62:
         17:4f:7f:6d:3e:7e:5c:af:66:90:a9:7d:8a:2e:10:69:bd:08:
         f5:c5:2b:b3
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUdwmZF+KQK8XVO4F+1Z6IbI65/XQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyMDE5MTc1MFoX
DTI2MDExOTE5MjI1MFowMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3
RDZCNzdGMzE3OTUzRjE2Rjk5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPG5EopbVslai3JpLomxhLMys+/Pm7KXc0t7zDj4dFW8WzxT9D3jNoO5Dcxy
xdvv1XI3HdPNsK4MJpZZ6KqhI1iviRv4DVN0OK5CWS3L/IDp+Uqr77186Ef/nPj6
aMq6ZBdWY2tTmADevmjFfKdrbP7KWPIUPnWnwzmH6g/5Wym9tRMNHMi/U76TUpaU
JO+md8eE5ypIGaEgE28W1SzFzZkP5DoEU7zxsiweWrc5GYXEP5s9QLsGBHh+jwce
oTjCjr0i4TfK84P/fc2Wd7c/66UR0PW+8QqndftvT3yZ3tKlxovNR4xguL+F3xor
RFXDvDK8dWqHfSZjtcYH1XZSfHMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHCDUafWUAhXgKp9a3fzF5U/FvmZMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by85MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxZTBkMTdj
LWVkZDEtNDIwMi1iNzM2LTNiNTI3ZWZhNmJhMi8wLzcwODM1MUE3RDY1MDA4NTc4
MEFBN0Q2Qjc3RjMxNzk1M0YxNkY5OTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnxJwwDQYJKoZIhvcNAQELBQADggEBADt11ZqFKE622KQ8ShN4w375fvoM7SG3
90bkBh6L/FIqi6amu7usoAtjRiw90HYqGuMO3VXuhuCg07BIEq8FTwkzDss4e+Xu
8w0w1jmz+0ouejbCQcUzumBLw4AmEgceeJqulB9sVno/hB0KQsLdwMIXO+H8bOai
41d2vokuLt7Lh42nTAPlvLb3LHkhUrMflPLorVWiZ3MTFbeDbFnLF88WdzPB0Qqy
YAtPaqmP+HbnCvttZxwAxzfXlDYVtdBhTj2gL2X5AYKe8OJO/IQOS5HLCwhc5yof
qzVpCdzX8+r6a2S7Jim9IdM8YhdPf20+flyvZpCpfYouEGm9CPXFK7M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:26 2025 by rpki-client